https://bugzilla.redhat.com/show_bug.cgi?id=1203718
Bug ID: 1203718
Summary: CVE-2015-1803 libXfont: crash on invalid read in
bdfReadCharacters
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: btissoir(a)redhat.com,
fonts-bugs(a)lists.fedoraproject.org,
sandmann(a)redhat.com
If the bdf parser failed to parse the data for the bitmap for any character, it
would proceed with an invalid pointer to the bitmap data and later crash when
trying to read the bitmap from that pointer.
A local user could exploit this issue to crash the X.Org server.
Upstream advisory:
http://seclists.org/oss-sec/2015/q1/865
Upstream patch:
http://cgit.freedesktop.org/xorg/lib/libXfont/commit/?id=78c2e3d70d29698244…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=a6kgapYM62&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1229198
Bug ID: 1229198
Summary: [kn_IN] Addition of glyphs to Lohit Kannada for recent
Unicode additions
Product: Fedora
Version: 23
Component: lohit-kannada-fonts
Assignee: psatpute(a)redhat.com
Reporter: samjnaa(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com
Created attachment 1036248
--> https://bugzilla.redhat.com/attachment.cgi?id=1036248&action=edit
Kannada Sign Spacing Candrabindu glyph
Unicode has recently accepted 0C80 Kannada Sign Spacing Candrabindu. I am
attaching the glyph for it. Please add this glyph to Lohit Kannada once the
character is published in Unicode.
Note that I am going to propose a few more Unicode characters for Kannada for
Vedic. Once Unicode accepts I'll attach those glyphs also here. This can be the
placeholder bug to ensure that the work gets done.
Thanks.
Reference:
http://www.unicode.org/alloc/Pipeline.html
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=GNK8FWSgdV&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1258542
--- Comment #5 from Nicolas Mailhot <nicolas.mailhot(a)laposte.net> ---
(In reply to Helio Chissini de Castro from comment #2)
> Yep
>
> They have the source, but no instructions how to build it whatsoever.
> I just followed the same process used on Overpass Red Hat font, which has
> the source available, but same way, only the type faces are included.
This is ridiculous, the fonts are derived from DejaVu, and DejaVu build is
completely scripted. The project just need to fork the build scripts like it
forked everything else, and decide on a naming policy
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=I1iEMoWLIq&a=cc_unsubscribe
_______________________________________________
fonts-bugs mailing list
fonts-bugs(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org
https://bugzilla.redhat.com/show_bug.cgi?id=1257496
--- Comment #10 from Akira TAGOH <tagoh(a)redhat.com> ---
the assumption of the testing code looks wrong. fontconfig doesn't explicitly
set antialias so far. which means it is up to the application how they behaves
against it. for instance, in Pango, they prefer antialiased font if no explicit
value is set to 'antialias'. i.e. if FcPatternGet*() doesn't return
FcResultMatch. as well as KDE I guess since I don't get any complaint about it.
I'm not sure why Java prefer non-antialiased font by default. why don't you
change the behavior like others?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=6jCvMtWlCn&a=cc_unsubscribe
_______________________________________________
fonts-bugs mailing list
fonts-bugs(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org
https://bugzilla.redhat.com/show_bug.cgi?id=1257496
J. Haas <jonha87(a)outlook.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|CLOSED |NEW
CC| |fonts-bugs(a)lists.fedoraproj
| |ect.org,
| |i18n-bugs(a)lists.fedoraproje
| |ct.org, pnemade(a)redhat.com,
| |tagoh(a)redhat.com
Component|java-1.8.0-openjdk |fontconfig
Resolution|NOTABUG |---
Keywords| |Reopened
--- Comment #9 from J. Haas <jonha87(a)outlook.de> ---
> I don't know, but the way it works currently it's by design.
Sorry, but then the design is stupid. Why would you want to have pixelated
fonts by default? Reopening this under fontconfig for now, as you suggested.
I don't care if this is fixed by changing the default fontconfig setting, by
improving Java font settings detection or whatever. And I have no real idea how
this works.
I'm just a simple Java software developer and I would like to have proper font
rendering on Fedora by default. I think this wish is reasonable.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=4dSuwaiqfq&a=cc_unsubscribe
_______________________________________________
fonts-bugs mailing list
fonts-bugs(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org
https://bugzilla.redhat.com/show_bug.cgi?id=985343
Bug ID: 985343
Summary: After telugu input .(full stop) is rendering as square
box in lokalize editor
Product: Fedora
Version: 19
Component: lohit-telugu-fonts
Severity: unspecified
Priority: unspecified
Assignee: psatpute(a)redhat.com
Reporter: kkrothap(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com
Created attachment 774715
--> https://bugzilla.redhat.com/attachment.cgi?id=774715&action=edit
Example screen shot regarding the problem.
Description of problem:
While using lokalize as translation editor, after telugu input if i type .(full
stop) it is rendering as square box.
Version-Release number of selected component (if applicable):
lohit-telugu-fonts-2.5.3-2.fc19.noarch
kdesdk-lokalize-4.10.5-1.fc19.x86_64
How reproducible:
Every time
Steps to Reproduce:
1.Open lokalize.
2.Input some telugu text.
3.Type . after telugu text.
Actual results:
. rendering as square box
Expected results:
Should render as it should be.
Additional info:
Working fine with pothana font.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ptT4KXOL2o&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1258123
Bug ID: 1258123
Summary: Section numbers absent when compiling with xelatex
Product: Fedora
Version: 22
Component: lohit-telugu-fonts
Severity: medium
Assignee: psatpute(a)redhat.com
Reporter: dasikashishir(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: fonts-bugs(a)lists.fedoraproject.org,
i18n-bugs(a)lists.fedoraproject.org, psatpute(a)redhat.com
Created attachment 1068266
--> https://bugzilla.redhat.com/attachment.cgi?id=1068266&action=edit
Note that the section numbers are absent.
Description of problem: When using Lohit Telugu as the main font for xelatex,
the
section numbers are absent and are replaced by boxes.
Version-Release number of selected component (if applicable):2.5.3
How reproducible: Always
Steps to Reproduce:
Compile the following document with xelatex
\documentclass[a4paper]{article}
\usepackage{fontspec}
\setmainfont{Lohit Telugu}
\title{లోహిత్ తెలుగు}
\author{తెలుగు వాడు}
\date{}
\begin{document}
\maketitle
\section{పరిచయం}
\end{document}
Actual results: No Section numbers
Expected results: There should be section numbers
Additional info: Only Lohit Telugu fonts seem not to give section numbers.
Other
lohit fonts like lohit-devanagari give section numbers. Even othet telugu fonts
like noto sans telugu, pothana2000 give section numbers
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=1tlxUEywfG&a=cc_unsubscribe
_______________________________________________
fonts-bugs mailing list
fonts-bugs(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/fonts-bugs@lists.fedoraproject.org